Direct answer: Verify the job off the platform where you found it: find the same posting on the company own careers page, confirm the recruiter works there through an independent channel, and treat any request for banking details, gift cards, or equipment purchases before a signed offer as a hard stop.
A fake job posting costs the scammer almost nothing to publish and can return a remarkable haul: full resumes with addresses and work history, copies of ID during fake onboarding, and in the worst variants, bank account details for direct deposit that never deposits anything.
Job seekers are under time pressure and inclined to comply, which is exactly the psychology the scam rents. The defense is a short verification routine done before applying, not after the first strange request arrives. This post lays out the routine and the tells that matter most.
Find the role on the company own careers page, reached by typing the company address yourself rather than following the posting links. A real opening almost always lives there. If the company has no careers page or the role is absent, contact the company through its main published number and ask whether the search is real.
Check the recruiter independently. A real recruiter has a work history that predates this month, connections in the industry, and an email on the company domain. A profile created recently, with a stock headshot and no footprint, reaching out about a dream role, is the scam standard shape.
No legitimate employer asks a candidate to buy equipment with a check they send, to pay for training, or to move money for any reason before starting. The fake check variant is especially costly: the check bounces after the victim has bought gift cards or shipped equipment to the scammer address.
Personal data has a schedule in real hiring. Tax and banking details are collected after a signed offer, through a recognizable HR system, never by a recruiter over chat or a personal email thread. Social security numbers requested at application stage from an unverified posting should end the conversation.
Search the job title plus the company name plus the word scam. Victims report these operations quickly, and a five second search often surfaces the warning. Search a distinctive sentence from the posting too; scam postings recycle text across dozens of fake listings and names.
Keep a log of what you sent where. If one application later produces suspicious contact, you will know which data is exposed and can freeze credit, change passwords, and report with specifics. Job hunting is a numbers game; a simple spreadsheet is the difference between exposure you can manage and exposure you can only guess at.
Readers working through this topic often find these earlier guides useful as well: Counterfeit Parts in Electronics: Where Fakes Enter the Supply Chain, Spotting Counterfeit Cosmetics and Skincare Before They Touch Your Skin, and Fake Charity Appeals: How to Verify a Cause Before You Give.
Common enough that job boards remove them in large batches and regulators issue standing warnings. Any high volume hiring category, remote work especially, carries them. Verification is not paranoia; it is a normal step in a modern job search.
Not by itself; real recruiters source candidates constantly. The flag is resistance to verification: no company domain email, no presence on the company site, and urgency pushing you to skip the normal steps. Real recruiters survive verification happily.
A resume alone is limited exposure, but act anyway: note what it contained, watch for targeted phishing using your work history, and freeze credit if it carried your address and date of birth. If you sent ID or banking details, escalate to your bank and a fraud alert immediately.
Some conduct early screens by chat, but document requests and financial steps never happen there. Treat the messaging interview as a yellow flag that demands stronger verification of everything else, not as proof by itself.